Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/bitwarden
Generated: Sat, 05 Sep 2026 10:53:58 GMT
Target Website: bitwarden.com
Overall Trust Score: 93/100 (Trusted)
bitwarden.com
Trusted
Scanned: Sep 5, 10:53 AMTRUST SCORE
93
CONFIDENT
Low Risk
93/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
20/100
20/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
93/100 — trusted. Long-established domain (10.8 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; page has no <title> — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
Standard Trusted CA
Threat Status
CleanClean
No blacklists or malware
Domain Age
10.8 years10.8 years
Registered 11/16/2015
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
151.101.1.91151.101.1.91
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
93 / 10093 / 100
Fast response time
Redirects
DirectDirect
No redirect hops
Top Priority RecommendationAction Needed
Page has no <title>
Well-maintained sites always set a page title.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Fast response (66ms)
- Served through Cloudflare
- 4 address record(s) resolved
- 2 authoritative nameservers
- Domain registered 11+ years ago
- Owner information disclosed
Warnings
- Page has no <title>
- No privacy policy found
- No terms of service found
- Large response served uncompressed
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- Cloudflare, Inc.
- Creation Date
- November 16, 2015 (10.8 years ago)
- Last Updated
- September 1, 2022
- Registry Expiry Date
- November 16, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited
ICANN Status Badges
client transfer prohibited
Domain registered 11+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Cloudflare, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
All Response Headers (19)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2
- IPv4 Addresses (A)
- 151.101.1.91, 151.101.65.91, 151.101.129.91, 151.101.193.91
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), alt3.aspmx.l.google.com (Priority: 10), alt4.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- igor.ns.cloudflare.com, rose.ns.cloudflare.com
- TXT Records Found
- 18 TXT verification records
A Records (IPv4)
151.101.1.91151.101.65.91151.101.129.91151.101.193.91
TXT Verification Records
OOSSRH-94202
MS=ms10313433
6e81d67c-d407-4e9f-bf25-3372f01f3e9c
MS=C8E6AF80F5B0DD0B5AD483EDFDB8C55CB3A9B468
bw=Qa/t9YOKsFsU9/qhVNesyup0byKExijKNhGjcj9N9lLB
anthropic-domain-verification-ce78r2=C3El56QZ4UekFLhM2BhH1Vcr7
slack-domain-verification=LMpgXAy3wScSisUrOiOzxYpUfciykE41MfblnAQc
google-site-verification=02PtJycFi417SDMgi-3vPDRsgJP98CCWVXdenimqMv0
google-site-verification=V8p-QL6humc_vX6Wi9FiTa5a9Lzx9DVp120jW8-ow2o
notion-domain-verification=XzPFwn4FBKjH89oYjUHwuyxGxzAURG6QuniFMOL06mh
h1-domain-verification=EjLrcRwtpQU1iHokYvvNt79uhuwHR92BxrRG6pmohr1w5fk7
h1-domain-verification=qhyNWpPNpjZeDLwbHo51AG1rqfQPD5qG9R8hvCmAdPB82MKQ
zapier-domain-verification-challenge=0520755a-cbd5-4697-b1aa-28c91f5261e7
stripe-verification=0F73E504516F9675013BCA18CE721381363172A7A3A881A8C26DCC31524FA0FB
stripe-verification=a048802b74e7474c811a37b7e45e4f0f10bbea9a16038574b6cceeab11b8068c
brave-ledger-verification=f8b96f2d0f5fd1db7ac8753f8d38b219911e5d32b0f955537479416ac5f53a20
atlassian-domain-verification=8wc47B5qEzmZSWU3FaWKd6EzPpPeW33aqHzS5Go1iZwceU4RHIAg8m825izy4gvE
v=spf1 include:spf.braintreegateway.com include:_spf.google.com include:amazonses.com include:_spf.freshsales.io include:22371289.spf07.hubspotemail.net ~all
4 address record(s) resolved
+4
2 authoritative nameservers
+2
- Registrable Domain
- bitwarden.com
- Registrar Organization
- Cloudflare, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited
- Delegated Authoritative Nameservers
- igor.ns.cloudflare.com, rose.ns.cloudflare.com
- Registration Lifecycle
- Registered: 2015 → Expires: 2027
Nameservers (NS)
igor.ns.cloudflare.comrose.ns.cloudflare.com
Domain registered 11+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Cloudflare, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:spf.braintreegateway.com include:_spf.google.com include:amazonses.com include:_spf.freshsales.io include:22371289.spf07.hubspotemail.net ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; rua=mailto:bc5y3xd7@ag.dmarcian.com,mailto:re+b82f2c5ed958@inbound.dmarcdigests.com,mailto:dmarc@bitwarden.com; ruf=mailto:bc5y3xd7@fr.dmarcian.com; aspf=r; fo=1; pct=100
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- bitwarden
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
js
Svelte
css
Tailwind CSS
analytics
Google AnalyticsGoogle Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- —
- Meta Description
- Bitwarden is the trusted, open source password manager for individuals, teams, and enterprises. Securely store, share, and manage passwords, passkeys, and secrets. Free to start.
- Document Language
- en-US
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1
- Generator Software
- —
5 technologies detected
Svelte, Tailwind CSS, Google Analytics, Google Tag Manager, Cloudflare
Mobile viewport configured
+2
Page has no <title>
Well-maintained sites always set a page title.
-3
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 66 ms
- Payload Body Size
- 674.9 KB
- Compression Status
- Uncompressed
- Cache Directives
- max-age=0, must-revalidate, public
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
Response is cache-friendly
max-age=0, must-revalidate, public
+2
AI Content Evaluation
93/100 — trusted. Long-established domain (10.8 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; page has no <title> — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 4,303 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 151.101.1.91
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://bitwarden.com/
- Redirect Hop Count
- 0 hops
Site responded with 200
Final URL: https://bitwarden.com/. Response time 66ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (66ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- Standard Trusted CA
- Subject Common Name (CN)
- bitwarden.com
- Validity Period
- 60 days remaining (Expires: 2026-11-04T10:53:58.419Z)
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- 1 certs recorded
Subject Alternative Names (Sample)
bitwarden.com
HTTPS encryption active & verified
Live TLS connection established successfully on port 443 with valid cipher suites.
+8
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageFound
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 991678758, 40058699607, 5.525 11.125, 9.2125 4.3125 9 3.7 9 3, 16.775 17.25, 14.175 16.425
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
Contact page linked from home page
+5
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://bitwarden.com/sitemap-index.xml
- Disallow Rules Count
- 5 rules
View Raw robots.txt
User-agent: * Allow: / Disallow: /*.md$ Disallow: /*.pdf$ Sitemap: https://bitwarden.com/sitemap-index.xml Host: https://bitwarden.com User-agent: GPTBot User-agent: OAI-SearchBot User-agent: ClaudeBot User-agent: Claude-SearchBot User-agent: PerplexityBot User-agent: Amazonbot User-agent: anthropic-ai User-agent: Bytespider User-agent: CCBot Allow: /llms.txt Allow: /blog/llms-full.txt Allow: /help/llms-full.txt Allow: /resources/llms-full.txt Allow: /*.md$ Disallow: /*.pdf$ Disallow: */careers/* Disallow: */events/*
robots.txt published
+2
sitemap.xml available
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
41
This scan
Sources Checked
18
Live security feeds
Scan Duration
2.57s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk